OK, last time we were together, we talked about the methodology.
Now we're taking notes.
So, you know, when you're either playing the CTF or you are trying to compile a report for a penetration
testing engagement or writing exercise, you want to make sure that you are able to sort of coalesce
all of your thoughts over screenshots, all the key points and data, the one place so that you can
then after the engagement finishes, turn it into a report which can provide high value to your customer.
So, you know, what we do here is there's a couple of different ways you can do it.
Why some people just take notes in notepad, which I don't think is very effective.
You can also use like Microsoft Word.
I have the best way of taking notes is actually using something called Churchie.
So I'm actually logged into callisthenics.
This is an offensive penetration testing Linux framework.
It's based on Debian is very popular.
And we're going to show you how to set this up and install a little bit later.
But right now, I just want to show you how you can watch this notetaking application, right?
So if we go to the top and we just type Cherrix, you see tree shows up here, quick cherry tree and
then we get this app.
Now, the cool thing is in Linux.
If you just press control shift print screen, you can put the screen, so let's pick up an application
that we want to run.
Let's say.
Information gathering.
Let's type them up on them map.
It's crazy.
So I don't have this map, which is strange, that the map is just different and gooey for in map,
let's see if I can type in to find another application.
Has a gooey.
I'll take you to get one.
So let's say we're running a.
Control shift, print screen, and we can simply drag across the screen and copy it to the clipboard.
I don't know if I captured it in time, let's see if I flip over to the territory and control the.
We're right, click and paste, oh, that's right, we can't actually do anything until we create a
node.
So if we move over to the left, you can see it says out of node in here, it says that we can add a
child node.
So first we need to do is add a node so we can press control and to do that.
So I'm going to press control.
I'm going to name this basically the name of this particular engagement.
So let's say you were testing me.
I put me up there right.
Then you would add your subnet shift controller so I can press shift and fill in.
And typically, you want your seven nodes to map to the miter attack framework if you can.
So recons the first one for press control, the which you pasting in whatever I have on my clipboard,
which right now it looks like it's absolutely nothing useful.
So let's delete that.
That's minimizes more press control shift print screen.
Screen darkens.
I'm just going to drag a nice little box over here.
Like a.
And it should have copy that to the clipboard jobi yes they we go and you can see the scroll bar down
here.
It's kind of big so what we can do is right click.
We can edit the image to make it a little bit smaller.
So let's change it down to 500.
You can see the dimensions are proportional, like, OK, and that looks a lot better, right?
So then we can say something like fired up now Tego, to begin the second phase, right.
We can do even some really fun things here.
Right.
So you could select this and then you can change it to an one graphic.
And then below that you can say, um, I'll take a is in a free open source recon tool included in Calli
clinics.
Right.
You can even, like, select the line and you can change the background to make it look, to make it
pop out if you have something important.
So that we can, of course, change this color from white to black.
We're going to cover this black.
Then once you fill out everything here, you would just add a new note, right, so control shift in
and maybe it would be resource development.
They see this one would became a child of the seventh grade so we can move it back up.
You can go to Noad move and then you can just say note up where you can shift up up.
Or no left ship left.
You can see that we've got this new note here, right?
We might say stood up digital ocean depths due to host Cobalt Strike Team several.
Right.
And then you put your notes about that here.
And once you have everything here, you have everything you want it to be.
You can just click file and then you can actually save this document.
As a sequel I database, or you can even Password-Protected now, I usually just use the the XML that
protected format because it's the easiest to use.
But you can see have other formats here too.
You can type your password here.
You want it to click.
OK.
It's going to bit it, Acme.
Put it in my documents.
Close this guy up.
Open the folder and then you should see it there.
Typically, this should open more territory.
So this is a windows, right, so you have to go the extra step of tapping cherry tree
and then what was already open here, but if you needed to open it from scratch, you would you say
file open file, find it and then you click open.
This is also a good way, you know, to take notes if you're taking an exam with OCP or CDH.
It's really important to stay organized.
Keep your notes in one place.
You remember that cool trick control shift screen to take a screenshot.
And then control the toothpaste, very nice, right, very cool.
So that's it for this lecture.
I want to keep it really, really straightforward in the next lecture.
We're going to dig into a networking refresher.
So we're going to give you just, you know, a basic background on networking.
In case you forgot, I.
By the presence of three shaking, she like that, and then once we get through that section, we're
going to dig into our laps, which is good to see you guys in the next elections.